$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa File: 2ae9989e-b6c5-38a0-9848-866149ae301f.roa (raw, json) Hash identifier: SxazLLyUF/UJaoy/eACiLlXGqmpl7xeaKlWztsKtl6o= Subject key identifier: 13:18:29:AC:44:97:A4:D7:CA:85:F1:1D:93:69:D5:7E:1E:71:97:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C5A5744978B5928F2F140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396563 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5a:57:44:97:8b:59:28:f2:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=daec7be1-f587-47e7-b633-aad6109fb473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:07:7b:85:00:51:a2:56:60:32:ff:14:0d: cc:6e:9d:83:c5:89:e5:7a:a4:5e:3f:a3:30:59:12: 7f:92:e2:c6:99:21:66:63:f1:91:65:91:17:68:74: f0:fd:31:ad:78:b6:93:0c:5f:76:4b:15:b3:cf:cf: 79:54:6b:a6:27:44:a3:a0:aa:40:c9:7d:d7:57:53: 39:ce:93:4a:70:22:3c:5a:61:f1:9b:f7:89:93:84: d3:01:ec:69:05:a3:06:83:9f:71:d4:12:35:f8:fb: df:4d:a1:7f:22:f6:18:01:98:66:45:ee:da:4c:07: ec:d2:9e:5f:75:40:39:3c:cc:cc:43:16:ce:19:8b: 2c:0f:a9:cd:35:25:5c:98:4b:98:f9:78:ae:13:f0: 0b:d9:0c:41:2d:6b:33:87:9b:ec:1c:93:b6:d7:6e: 9b:fa:cd:d9:f3:b4:40:95:18:13:fd:47:08:e1:3a: 3d:e8:6f:e3:df:d1:1d:ac:4f:7c:46:00:67:65:0b: 85:7d:7d:46:e1:38:82:f5:64:8e:ba:70:c3:08:1e: df:0f:c4:f6:0e:13:87:04:6e:8b:63:ab:cc:41:48: fb:aa:b6:51:c9:c2:b1:2f:48:85:ea:8b:b2:ca:70: eb:f1:de:0e:73:51:09:f5:7e:90:75:de:85:a2:b5: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:18:29:AC:44:97:A4:D7:CA:85:F1:1D:93:69:D5:7E:1E:71:97:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ae9989e-b6c5-38a0-9848-866149ae301f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:58:ff:0b:4f:5a:3c:f4:7d:25:31:d2:88:48:79:e8:38:69: dc:a3:de:38:17:c0:cf:39:6e:70:ba:be:7b:6a:d6:1b:d6:88: de:a3:80:52:9c:f3:c2:72:68:c7:83:5f:4e:d3:38:c5:a9:d4: 45:27:8f:56:c8:61:79:b1:dc:67:60:3d:51:00:83:d5:49:c4: c7:a5:48:d7:c0:03:a9:22:5b:04:37:2e:84:2d:1f:42:08:08: 2f:a4:61:c0:29:11:ca:8d:fd:1f:47:dd:e2:2e:97:7f:7c:dd: 6f:97:a5:b6:f7:94:c9:85:d8:24:bc:39:7b:e8:ab:b9:f5:3f: 96:93:62:88:4e:8c:21:22:09:51:57:df:b5:e5:51:b0:28:7f: 7e:1a:6a:f3:92:6e:e0:ac:33:de:77:4b:f1:d7:43:0c:b2:77: 1c:32:aa:46:cf:0a:4f:8f:9a:33:0e:88:c4:75:13:7c:17:5b: 3e:95:c0:3c:17:1f:17:62:00:40:29:2b:ed:08:3e:59:f9:ee: 7b:65:9b:f9:71:64:43:ea:01:3e:66:b9:9b:26:4b:ba:1f:1f: 01:7e:74:56:21:e1:c3:d5:03:82:c1:09:39:e0:c0:3e:69:49: 03:67:80:6b:2e:e5:92:c7:cd:9a:98:4b:89:ed:47:20:ef:92: 2b:2f:b3:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fFpXRJeLWSjy8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk ZGFlYzdiZTEtZjU4Ny00N2U3LWI2MzMtYWFkNjEwOWZiNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6cHe4UAUaJWYDL/FA3Mbp2DxYnleqReP6Mw WRJ/kuLGmSFmY/GRZZEXaHTw/TGteLaTDF92SxWzz895VGumJ0SjoKpAyX3XV1M5 zpNKcCI8WmHxm/eJk4TTAexpBaMGg59x1BI1+PvfTaF/IvYYAZhmRe7aTAfs0p5f dUA5PMzMQxbOGYssD6nNNSVcmEuY+XiuE/AL2QxBLWszh5vsHJO2126b+s3Z87RA lRgT/UcI4To96G/j39EdrE98RgBnZQuFfX1G4TiC9WSOunDDCB7fD8T2DhOHBG6L Y6vMQUj7qrZRycKxL0iF6ouyynDr8d4Oc1EJ9X6Qdd6ForW+UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBMYKaxEl6TXyoXxHZNp1X4ecZc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFlOTk4OWUtYjZjNS0z OGEwLTk4NDgtODY2MTQ5YWUzMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdY/wtPWjz0fSUx0ohIeeg4adyj3jgXwM85bnC6vntq1hvWiN6j gFKc88JyaMeDX07TOMWp1EUnj1bIYXmx3GdgPVEAg9VJxMelSNfAA6kiWwQ3LoQt H0IICC+kYcApEcqN/R9H3eIul3983W+Xpbb3lMmF2CS8OXvoq7n1P5aTYohOjCEi CVFX37XlUbAof34aavOSbuCsM953S/HXQwyydxwyqkbPCk+PmjMOiMR1E3wXWz6V wDwXHxdiAEApK+0IPln57ntlm/lxZEPqAT5muZsmS7ofHwF+dFYh4cPVA4LBCTng wD5pSQNngGsu5ZLHzZqYS4ntRyDvkisvszA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:39 2026 by rpki-client